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(54) System and method for providing database acces control in a secure distributed network 



(57) An access control database has access control 
objects that collectively store information that specifies 
access rights by users to specified sets of the managed 
objects. The specified access rights include access 
rights to obtain management information from the net- 
work. An access control server provides users access 
to the managed objects in accordance with the access 
rights specified by the access control database. An in- 
formation transfer mechanism sends management in- 
formation from the network to a database management 
system (DBMS) for storage in a set of database tables. 
Each database table stores management information 
for a corresponding class of managed objects. A set of 
views limits access to the management information 
stored in the database tables. Each view defines a sub- 
set of rows in the database tables that are accessible 
when using this view. The set of database table rows 
that are accessible when using each view in the set cor- 
responds to the managed object access rights specified 
by the access control database for at least one the us- 
ers. A view access control means specifies which views 
in the set of views are useable by specified ones of the 
users. The database access engine accesses informa- 
tion in the set of database tables using the set of views 
such that each user is allowed access only to manage- 
ment information in the set of database tables that the 
user would be allowed by the access control d 
to access. 
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